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EXAMINER'S AMENDMENT 

An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with James Herkenhoff on June 22, 2005. The examiner's amendment resulted from a 
series of telephone conversations regarding the clarity of the claim preambles. The 
substance of the discussion should be apparent from the nature of the amendments. 
The Applicants need not file a separate summary of the interview. 



Please amend the claims as follows: 
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1. (Currently Amended) A system for controlling user access between an 
Internet including te Internet sites and b e tw ee n an area network and an I nt e rnet , 
comprising: 

a categorized database of Internet sites; 

a first module configured to associate a category with an Internet site 
requested by a user; 

a second module configured to determine a data transfer rate between the 
area network and the Internet; 

a categorized database of threshold values; and 

a third module configured to compare the data transfer rate to the 
categorized database of threshold values and, responsive to the comparison, to 
block the user's further access to the site. 

2. (Original) The system of Claim 1, wherein the categorized database of 
threshold values includes an array of categories of Internet sites, each category 
including an associated threshold value. 

3. (Original) The system of Claim 2, wherein the array of categories of 
Internet sites includes threshold values associated with work hours and off work hours. 

4. (Original) The system of Claim 2, wherein the array of categories of 
Internet sites includes threshold values associated with the classification of the user. 

5. (Original) The system of Claim 2, wherein the array of categories of 
Internet sites includes threshold values associated with the identification of the user. 

6. (Original) The system of Claim 1, wherein the data transfer rate is 
indicative of a total data transfer rate between the area network and the Internet. 

7. (Previously Presented) The system of Claim 1, wherein the data transfer 
rate is indicative of a portion of a total data transfer rate between the area network and 
the Internet that is being used by the category associated with the Internet site 
requested by the user. 

8. (Original) The system of Claim 1 further comprising a fourth module 
configured to determine whether the user has spent a preset amount of time on the 
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Internet site within the category and, responsive to the determination, allowing the 
user's further access to the site. 

9. (Previously Presented) The system of Claim 1 further comprising a fourth 
module configured to determine whether the user requests a postponed access to the 
Internet site within the category, and responsive to the determination, to store pages 
from the requested Internet site to a storage. 

10. (Previously Presented) The system of Claim 1 further comprising a fourth 
module configured to determine whether the user has accessed the Internet site within 
the category a predetermined number of times and, responsive to the determination, to 
block the user's further access to the Internet site. 

11. (Original) The system of Claim 1 further comprising a fourth module 
configured to determine whether the user has accessed the Internet site within the 
category and thereafter notifying the user that any Internet access will be stored to a log 
file. 

12. (Original) The system of Claim 1, wherein the area network is a local area 
network. 

13. (Original) The system of Claim 1 , wherein the area network is a wide area 
network. | 

14. (Original) The system of Claim 13, wherein the wide area network includes 
a plurality of local area networks. 

15. (Currently Amended) A method of controlling user access between an 
Internet including t o Internet sites and botwoon an area network and an I ntornot , the 
method comprising: 

referencing a categorized database of Internet sites; 
associating a category with an Internet site requested by a user; 
determining a data transfer rate between the area network and the 
Internet; and 

comparing the data transfer rate to a categorized database of threshold 
values, and responsive to the comparison, blocking access to the site. 
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16. (Original) The method of Claim 15 further comprising determining whether 
the user has spent a preset amount of time on the Internet site within the category and, 
responsive to the determination, blocking the user's further access to the site. 

17. (Previously Presented) The method of Claim 15 further comprising 
determining whether the user requests a postponed access to the Internet site within 
the category, and responsive to the determination, storing pages from the requested 
Internet site to a storage. 

18. (Original) The method of Claim 15 further comprising determining whether 
the user has accessed the Internet site within the category a predetermined number of 
times and, responsive to the determination, blocking the user's further access to the 
site. 

19. (Original) The method of Claim 15 further comprising determining whether 
the user has accessed the Internet site within the category and thereafter notifying the 
user that any Internet access will be stored to a log file. 

20. (Original) The method of Claim 15, wherein the categorized database of 
threshold values includes an array of categories of Internet sites, each category 
including an associated threshold value. 

21. (Original) The method of Claim 20, wherein the array of categories of 
Internet sites includes threshold values associated with work hours and off work hours. 

22. (Original) The method of Claim 20, wherein the array of categories of 
Internet sites includes threshold values associated with the classification of the user. 

23. (Original) The method of Claim 20, wherein the array of categories of 
Internet sites includes threshold values associated with the identification of the user. 

24. (Original) The method of Claim 15, wherein the data transfer rate is 
indicative of a total data transfer rate between the area network and the Internet. 

25. (Previously Presented) The method of Claim 15, wherein the data transfer 
rate is indicative of a portion of a total data transfer rate between the area network and 
the Internet that is being used by the category associated with the Internet site 
requested by the user. 
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26. (Original) The method of Claim 15, wherein the area network is a local 
area network. 

27. (Original) The method of Claim 15, wherein the area network is a wide 
area network. 

28. (Original) The method of Claim 27, wherein the wide area network 
includes a plurality of local area networks. 

29. (Currently Amended) A system for controlling user access between an 
Internet including to Internet sites and botw o on an area network and an I ntornot , the 
system comprising: 

means for referencing a categorized database of Internet sites; 
means for associating a category with an Internet site requested by a 

user; 

means for determining a data transfer rate between the area network and 
the Internet; and 

means for comparing the data transfer rate to a categorized database of 
threshold values, and responsive to the comparison, blocking access to the site. 

30. (Currently Amended) A method of controlling user access between an 
Internet including t o Internet sites and b e tw ee n an area network and an I nt e rn e t , the 
method comprising: 

receiving a request for an Internet site at a categorized site management 
module; 

referencing a categorized database of Internet sites; 

determining if the categorized database of Internet sites is responsive; 

referencing a user permissions module to determine whether the user is 
restricted from accessing particular categories of sites; and 

if the categorized database of Internet sites is not responsive, gradually 
degrading a level of service of the categorized site management module. 

31. (Original) The method of Claim 30, wherein degrading the level of service 
comprises: 
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determining a data transfer rate between the area network and the 
Internet; 

selecting a default value from a categorized database of threshold values; 

and 

comparing the data transfer rate to the default value, and responsive to 
the comparison, blocking access to the site. 

32. (Previously Presented) The method of Claim 30, wherein degrading the 
level of service includes limiting the application of the categorized site management 
module to the request for the Internet site. 

33. (Previously Presented) The method of Claim 32, wherein limiting the 
application of the categorized site management module includes applying a default 
global policy to the request for the Internet site. 

34. (Previously Presented) The method of Claim 32, wherein limiting the 
application of the categorized site management module includes allowing a specific 
category of Internet sites. 

35. (Currently Amended) A system for controlling user access between an 
Internet including t o Internet sites and botwoon an area network and an I nt e rn e t , 
comprising: 

a first module configured to determine a data transfer rate between a user 
and the Internet; 

a database of quota values including a limit associated with the user; and 
a second module configured to compare the data transfer rate to the limit 

associated with the user and, responsive to the comparison, to block the user's 

further access to the site. 

36. (Original) The system of Claim 35, wherein the data transfer rate is a 
measure of bytes transferred per time period. 

37. (Original) The system of Claim 35, wherein the data transfer rate is a 
measure of number of hits per time period. 

38. (Previously Presented) A system for controlling software application data 
traffic between an area network and an Internet, comprising: 
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a database of software applications; 

a first module configured to associate a software application data traffic 
type with a software application requested by a user; 

a second module configured to determine a data transfer rate between the 
area network and the Internet; 

a software database of threshold values; and 

a third module configured to compare the data transfer rate to the software 
database of threshold values and, responsive to the comparison, to block the 
user's further requests for the software application data traffic type. 

39. (Original) The system of Claim 38, wherein the software database of 
threshold values includes an array of software application data traffic types, each type 
including an associated threshold value. 

40. (Previously Presented) The system of Claim 39 further comprising a fourth 
module configured to determine whether the user has received a pre-selected number 
of resources associated with the software application data traffic type and, responsive to 
the determination, to allow the user's further access to resources associated with the 
software application data traffic type. 

41. (Currently Amended) A method of controlling user access between an 
Internet including !! to]] a resource or service and botwoon an area network and an 
I nt e rn e t , the method comprising: 

requesting a resource or service from an Internet; 

referencing a database of software applications; 

determining a software data traffic type that is associated with data 
packets captured from the area network; 

determining a data transfer rate between the area network and the 
Internet; and 

comparing the data transfer rate to a software database of threshold 
values, and responsive to the comparison, blocking access to the resource or 
service. 
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42. (Original) The method of Claim 41, wherein the software database of 
threshold values includes an array of software application data traffic types, each type 
including an associated threshold values. 

43. (Original) The method of Claim 42 further comprising determining whether 
the user has received a pre-selected number of resources associated with the software 
application data traffic type and, responsive to the determination, blocking access to the 
resource or service. 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Andrew Caldwell, whose telephone number is (571 ) 
272-3868. The examiner can normally be reached on M-F from 9:00 a.m. to 5:30 p.m. 
EST. 

Any general inquiry relating to the status of this application can be answered 
using Patent Application Information Retrieval (PAIR) system, which is available at the 
USPTO web site. Any questions on using the PAIR system should be directed to the 
Patent Electronic Business Center toll free at (866) 217-9197. 




Andrew Caldwell 

571-272-3868 ANDREW CALDWELL 

June 22, 2005 SUPERVISORY PATENT EXAMINER 



